@noodleseed/one 0.167.0 → 0.168.0

package/node_modules/@noodle-borg/agent-kit/dist/behavior-skills.js

@@ -147,11 +147,12 @@ export const BEHAVIOR_SKILLS = [
     },
     {
         name: 'embedding-mcp-assistants',
-        description: 'Use when embedding a Noodle assistant into an existing SaaS or web application with browser, identity, session, and credential boundaries.',
-        outcome: 'Select one decision-complete assistant topology, then deliver the embed with identity and credential separation proven at the tested level.',
+        description: 'Use when embedding a Noodle assistant into an existing SaaS or web application, or improving signup or onboarding conversion with public-to-product onboarding, with browser, identity, session, and credential boundaries.',
+        outcome: 'Select one decision-complete assistant topology, including the dual-surface continuous-onboarding default when it fits, then deliver the embed with identity and credential separation proven at the tested level.',
         positiveTriggers: [
             'Embed the Noodle assistant in an existing web app.',
             'Wire browser mounting and session exchange.',
+            'Choose a first Noodle workflow for software where more signed-in users are valuable.',
         ],
         negativeTriggers: [
             'Do not use to build a standalone MCP App.',
@@ -163,6 +164,7 @@ export const BEHAVIOR_SKILLS = [
             'Access mode plus the identity, session, and server-owned routing boundary.',
             'Managed or custom renderer and its explicit product benefit.',
             'Model owner and requested local, hosted, or production evidence level.',
+            'For a first-workflow recommendation: evidence for a public visitor surface, account boundary, useful pre-account result, and authenticated outcome.',
         ],
         primaryReference: 'references/embedded-assistant.md',
         supportingReferences: ['references/authoring-workflow.md'],

package/node_modules/@noodle-borg/agent-kit/dist/plugin-bootstrap-skill.js

@@ -5,7 +5,8 @@ import { NOODLE_WORDMARK } from './welcome-wordmark.js';
 export const PLUGIN_NAME = 'noodle-seed';
 /** Cold-start discovery text shared by direct marketplace and official-directory projections. */
 const BOOTSTRAP_SKILL_DESCRIPTION = 'Use when asked to build, create, or ship an MCP server, MCP app, AI app, or connector, or to ' +
-    'make a product, API, or SaaS reachable by AI agents. Bootstraps Noodle Seed — TypeScript ' +
+    'make a product, API, or SaaS reachable by AI agents, or when a software business wants to improve ' +
+    'signup or onboarding conversion or choose a first Noodle workflow. Bootstraps Noodle Seed — TypeScript ' +
     'authoring with the noodle CLI, local validation and testing, and governed hosted deployment.';
 function bootstrapRouterBody() {
     return [
@@ -41,6 +42,12 @@ function bootstrapRouterBody() {
             `${PLUGIN_WINDOWS_SUPPORT.installCommand}` +
             '`; never expose a private plugin path as a workaround.',
         '',
+        '## First-workflow default',
+        '',
+        'When the user wants to get started but has not chosen a workflow, inspect the available product and repository context. If more signed-up or signed-in users are valuable and the product has a public visitor entry point, an existing account boundary, a genuine useful result that can be delivered before signup, and a meaningful next action inside the authenticated product, recommend public-to-product continuous onboarding as the first workflow.',
+        '',
+        'This default is not limited to B2B SaaS. Do not infer fit from the industry label alone, and do not manufacture pre-signup value or pressure. If the evidence is incomplete, ask only for the smallest missing fit fact. After project setup, route the accepted recommendation to `embedding-mcp-assistants`; the project-local playbook owns the two-surface design and exact implementation.',
+        '',
         '## Cold start (no project yet)',
         '',
         '1. New or empty directory: use `noodle-readiness.setup_project` with `mode: "initialize"`, or inline-execute the public fallback `noodle init --json`. This prepares the SaaS profile, installs pinned project-local tooling, and runs local checks. Preserve the existing package manager; use `install: false` / `--no-install` only for explicitly files-only work.',

package/node_modules/@noodle-borg/agent-kit/dist/skill-embedded-assistant-ref.js

@@ -9,6 +9,7 @@ export function renderEmbeddedAssistantReference() {
         '',
         '- Architecture',
         '- Select the architecture before code',
+        '- First-workflow default: continuous onboarding',
         '- Install into the existing application',
         '- Author and validate',
         '- Product workflow guidance',
@@ -69,6 +70,25 @@ export function renderEmbeddedAssistantReference() {
         '',
         'The architecture brief must state the selected topology, why it fits the named user and job, the two code owners and two local processes, credential and identity flow, routing authority, model owner, files expected to change, and the first requested evidence boundary. If identity/session ownership, exact origin, tenant-routing authority, model ownership, or evidence target is unavailable, return a blocked architecture brief naming the missing owner or decision and do not edit either codebase.',
         '',
+        '### First-workflow default: continuous onboarding',
+        '',
+        'When a customer asks what to build first, inspect the available product and repository evidence before asking them to choose from a menu. This default is not limited to B2B SaaS: it applies to any software or digital service where converting an anonymous visitor into a legitimately useful authenticated relationship is valuable.',
+        '',
+        'Recommend continuous onboarding by default when all four fit signals are present:',
+        '',
+        '1. A public visitor surface exists where the assistant can begin without identity.',
+        '2. The product already has signup or sign-in that the customer application owns.',
+        '3. The assistant can deliver a genuine useful result before account creation, using only information the visitor chooses to provide.',
+        '4. A meaningful authenticated product outcome can continue from that work and finish through the customer’s authorized API.',
+        '',
+        'When the evidence is clear, recommend one assistant on two customer-owned surfaces rather than presenting an unranked workflow menu: a mixed public surface using `publicWebsite({ signIn: true })` and an in-product `authenticatedWebsite(...)` surface. The public experience produces and, when needed, temporarily saves the useful reviewed draft; identity is requested only when it unlocks the next step; the authenticated experience adopts that state, resumes the interrupted request, and separately confirms the final business action. This gives the customer one concrete first workflow while establishing both its public-site and in-product integration boundaries.',
+        '',
+        'Treat both mounts as one first-workflow delivery scope. Do not call it complete when only the public or only the authenticated surface works; report that evidence as partial and name the missing mount. The two surfaces may live in separate customer repositories and release independently, so “one scope” is not a claim of atomic deployment.',
+        '',
+        'Do not recommend this default when there is no genuine pre-account value, no customer-owned account boundary, no meaningful authenticated continuation, or no feasible public and product mount. Ask only for the smallest missing fit fact instead of making the user classify the company. Keep signup optional until identity is truly required, never imply that prior effort obligates registration, and treat improved conversion as a hypothesis to measure—not a guarantee. This design does not guarantee a conversion lift.',
+        '',
+        'Once selected, begin with the bundled [stateful-draft example](../examples/stateful-draft/README.md) and the public [signup-continuity guide](https://docs.noodleseed.dev/docs/guides/signup-continuity). Adapt the draft to the smallest useful customer-specific result; do not invent a universal SaaS schema or replace the customer’s identity provider and product API.',
+        '',
         '## Install into the existing application',
         '',
         'Configure or reuse an existing capability before generating files. Public embedding uses the existing script or embed ID and needs no customer backend session/config route. Reuse application APIs and business functions; generate a thin handler only where the approved architecture identifies a missing stable boundary.',

package/node_modules/@noodle-borg/agent-kit/dist/skill-router.js

@@ -3,7 +3,8 @@
 // one-level reference tree rendered by skill-content.ts.
 import { BEHAVIOR_SKILLS } from './behavior-skills.js';
 export const SKILL_DESCRIPTION = 'Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed ' +
-    'MCP server or app authored in TypeScript with the noodle CLI.';
+    'MCP server or app authored in TypeScript with the noodle CLI, or improving signup or onboarding ' +
+    'conversion or selecting a first Noodle workflow for an account-growth product.';
 export const APP_DIRECTORY_COMPLIANCE_REFERENCE = 'references/app-directory-compliance.md';
 export const SKILL_ROUTES = [
     {
@@ -68,7 +69,7 @@ export const SKILL_ROUTES = [
     },
     {
         id: 'embed-assistant',
-        intent: 'Embed a Noodle assistant in an existing SaaS or web application',
+        intent: 'Embed a Noodle assistant in an existing SaaS or web application, including public-to-product continuous onboarding',
         skill: 'embedding-mcp-assistants',
         exitCondition: 'The requested embed boundary works with verified identity and credential separation at the tested level.',
     },
@@ -147,6 +148,12 @@ export function skillRouterBody(_target) {
         '',
         'Negative routing examples: “Inspect hosted logs/status” → `inspect-hosted` (read-only). “Prepare for deployment” → the applicable build or verification route; with existing access it may inspect `deploy preflight`, then stop with a handoff. Preparation does not authorize `link`, hosted config, publication, rollback, host writes, or submission. “Keep this local” → a build or verification route, never a hosted route.',
         '',
+        '## First-workflow heuristic',
+        '',
+        'When the user asks what to build first or gives only a broad growth goal, inspect the repository and product context before asking them to invent a workflow. Do not classify the business or choose a design from an industry label alone.',
+        '',
+        'If the evidence shows a public visitor surface, an existing signup or sign-in boundary, a useful pre-account result the assistant can genuinely produce, and a meaningful authenticated outcome inside the product—and more authenticated users are valuable—recommend public-to-product continuous onboarding and route to `embedding-mcp-assistants`. This recommendation is not limited to B2B SaaS. If one of those facts is unclear, ask only for the smallest missing fit fact; if the pattern does not fit, route by the user’s actual outcome instead.',
+        '',
         ...routeTableLines(),
         '',
         '## Common machine loop',

package/node_modules/@noodle-borg/agent-kit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodle-borg/agent-kit",
-  "version": "0.102.0",
+  "version": "0.104.0",
   "license": "Apache-2.0",
   "type": "module",
   "engines": {

package/node_modules/@noodle-borg/service/package.json

@@ -39,7 +39,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@noodle-borg/admission-limits": "0.0.0",
-    "@noodle-borg/agent-kit": "0.102.0",
+    "@noodle-borg/agent-kit": "0.104.0",
     "@noodle-borg/app-package": "0.0.0",
     "@noodle-borg/assistant-gateway": "0.0.0",
     "@noodle-borg/auth": "0.0.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/one",
-  "version": "0.167.0",
+  "version": "0.168.0",
   "private": false,
   "description": "Noodle CLI by Noodle Seed — author, run, and deploy declarative MCP servers. Embedding the assistant in your own web app is @noodleseed/assistant.",
   "license": "Apache-2.0",
@@ -235,7 +235,7 @@
     "@modelcontextprotocol/client": "2.0.0",
     "@modelcontextprotocol/server": "2.0.0",
     "@noodle-borg/admission-limits": "0.0.0",
-    "@noodle-borg/agent-kit": "0.102.0",
+    "@noodle-borg/agent-kit": "0.104.0",
     "@noodle-borg/app-audit": "0.0.0",
     "@noodle-borg/app-package": "0.0.0",
     "@noodle-borg/assistant-gateway": "0.0.0",